Skip to content

App Store rejectionGuideline 5.1.1(i) - Legal - Privacy - Data Collection and Storage

Guideline 5.1.1(i) says every app must link to its privacy policy in the App Store Connect metadata field and inside the app, where it is easy to find. The policy itself must say what data the app collects and how it is used, cover third parties, and explain retention and deletion.

Short answer

Put the policy URL in the Privacy Policy URL field in App Store Connect and add a link inside the app, for example in settings or on the sign-up screen. Then check the policy names the data collected, how and why, every third party that gets data such as analytics, ads and SDKs, how long data is kept, and how a user can withdraw consent or ask for deletion. Resubmit and say what changed in the review notes.

Rather not fix it yourself? App Fix Ticket starts with a fixed-price diagnosis, then a fixed price for the fix before any fix work.

Why Apple flagged the privacy policy, and the fix

  1. 01

    The link is missing in App Store Connect or in the app

    “All apps must include a link to their privacy policy in the App Store Connect metadata field and within the app in an easily accessible manner.” Apple, Guideline 5.1.1(i)

    Both places are required, even for an app that collects no data. Check the URL opens a real page, not a login screen or a 404.

  2. 02

    The policy doesn’t say what the app collects

    “Identify what data, if any, the app/service collects, how it collects that data, and all uses of that data.” Apple, Guideline 5.1.1(i)

    A policy written only for a website can leave out the app. List the data the app and its backend collect, how they collect it and every use of it.

  3. 03

    Third parties and SDKs aren’t covered

    “will provide the same or equal protection of user data as stated in the app’s privacy policy and required by these Guidelines.” Apple, Guideline 5.1.1(i)

    Apple names analytics tools, advertising networks and third-party SDKs. The policy must confirm that any third party that gets user data provides the same or equal protection as the privacy policy states and the Guidelines require.

  4. 04

    Retention and deletion aren’t explained

    “Explain its data retention/deletion policies and describe how a user can revoke consent and/or request deletion of the user’s data.” Apple, Guideline 5.1.1(i)

    Also check: the policy says how long data is kept and how a user can withdraw consent or ask for their data to be deleted.

Checked against the vendor’s docs on : Apple: App Review Guidelines, 5.1.1 Data Collection and Storage; App Store Connect Help: App information (Privacy Policy URL); Apple: App Review (replying and appeals).

Rather hand it over?

Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.

Resubmit before Apple’s holiday slowdown

Pay for the Diagnosis and send the rejection and access to the app by (US Eastern). The Diagnosis is back by . Pay for the Fix that day and it arrives as a pull request by , in time to build and resubmit before .

In past years Apple said reviews may take longer around the holidays: December 20 to 26 in 2024 (opens in a new tab), December 22 to 27 in 2023 (opens in a new tab), December 23 to 27 in 2022 (opens in a new tab). Apple hasn’t posted its 2026 dates yet (checked ). Approval stays Apple’s decision.

“Very responsive, attentive to fixing bugs, and completed the project as needed! Thank you!”
A buyer in the United States, July 2022. Shopify on Fiverr
All 127 Fiverr reviews

Related: App Store Guideline 5.1.1 · App Store Guideline 5.1.1(v) account deletion · App Store Guideline 5.1.2 data use and sharing · App Store Guideline 5.1.1(ix)

Questions

More on this rejection

Should I reply to App Review or appeal?

Reply first. Apple says you can correspond with App Review in App Store Connect to resolve the issues before resubmitting, which is the place for a demo account, a screen recording or an explanation. Appeal to the App Review Board only if you believe App Review misunderstood the app or treated you unfairly. Apple allows one appeal per rejected submission and asks for specific reasons the app complies.

Does an app that collects no data need a privacy policy?

Yes. Guideline 5.1.1(i) says all apps must link to a privacy policy, and the policy must identify what data, if any, the app collects. A short policy that says the app collects no data still needs the link in both places.

Where does the URL go in App Store Connect?

In the Privacy Policy URL field of the app information. App Store Connect Help lists it as required for iOS and macOS apps.

Can you fix it for me?

Yes, through the App Fix Ticket: you send the rejection message and access to the app, Simon writes a diagnosis of what App Review hit and how to fix it, then fixes the code so you can resubmit. Each step has a fixed price, paid upfront. Approval stays Apple’s decision; the ticket covers the fix.

A different error?

Describe it and get a written quote

Send the error and what you were doing. You get a written scope, a fixed price and a timeline; Simon replies by email, usually within one business day.